Overview

overview

10

Static

static

8

49e42088d8...d3.xls

windows7-x64

10

49e42088d8...d3.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49e42088d816f9f860b43a849b979504f54b35495613d447a0f8ad6713f43ad3

  • Size

    150KB

  • Sample

    221123-1kv8lsaf31

  • MD5

    c4c146b7867d17e461481cbb8510a45f

  • SHA1

    976e77afbf2539d7cfa52fb658d81f12cf60b452

  • SHA256

    49e42088d816f9f860b43a849b979504f54b35495613d447a0f8ad6713f43ad3

  • SHA512

    06c380a7dcc18fddeb6b14c1e94c39da060bc6a7b45a155b1199b9e9b730cd95f69788b8d49b1c6fa9a0f222d78bca648bb857f9b980624ce878f38fce8a973a

  • SSDEEP

    3072:44ll6Nc7yRzs1H75wkZUgsCfaX+9PwRnmoIPWVbrzQ7ITkeu+vJtXwH:dll6Nc7yRzs1H75wkZUgsCfaX+9PwRnH

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      49e42088d816f9f860b43a849b979504f54b35495613d447a0f8ad6713f43ad3

    • Size

      150KB

    • MD5

      c4c146b7867d17e461481cbb8510a45f

    • SHA1

      976e77afbf2539d7cfa52fb658d81f12cf60b452

    • SHA256

      49e42088d816f9f860b43a849b979504f54b35495613d447a0f8ad6713f43ad3

    • SHA512

      06c380a7dcc18fddeb6b14c1e94c39da060bc6a7b45a155b1199b9e9b730cd95f69788b8d49b1c6fa9a0f222d78bca648bb857f9b980624ce878f38fce8a973a

    • SSDEEP

      3072:44ll6Nc7yRzs1H75wkZUgsCfaX+9PwRnmoIPWVbrzQ7ITkeu+vJtXwH:dll6Nc7yRzs1H75wkZUgsCfaX+9PwRnH

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks